Cloud Security & SIEM Engineer — SOC (Onsite, Dubai)

Qode; Dubai; On-site; AED 312,000 - 502,000; Full time

Job summary

Qode seeks a Cloud Security & SIEM Engineer to join its Security Operations Centre in Dubai. The role focuses on securing multi-cloud environments (AWS/Azure/GCP), integrating cloud telemetry with SIEM, monitoring activities, and automating security operations.

The candidate will implement IAM controls, strengthen network security, and develop SIEM detection rules and dashboards. Immediate joiners preferred for a dynamic onsite SOC.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, Engineering or related discipline.
• 3–8 years of cybersecurity/cloud security/SOC experience.
• Hands-on with AWS, Azure, or GCP.
• Knowledge of IaaS, PaaS, SaaS and shared-responsibility models.
• IAM, RBAC, least privilege, MFA, and privileged-access monitoring.
• Experience with cloud network security (VPCs, firewalls, segmentation).
• Experience integrating cloud logs into a SIEM.
• Proficient in Python, PowerShell, or Bash.
• Strong analytical, documentation skills; able to work onsite in UAE.

Responsibilities

• Monitor workloads across AWS, Azure, and GCP and enforce cloud security controls.
• Integrate cloud telemetry with SIEM and maintain log ingestion.
• Investigate cloud security events and support incident response.
• Develop SIEM detection rules, dashboards, and playbooks.
• Implement IAM controls, MFA, and least privilege enforcement.
• Collaborate on cloud network security, Zero Trust, and secure connectivity.

Skills

Cloud security

SIEM engineering

SOC experience

Python

PowerShell

Bash

RBAC

MFA

Threat detection

Education

Bachelor’s degree in Cybersecurity/IT/CS/Engineering

Tools

Securonix

Microsoft Sentinel

Splunk

IBM QRadar

Elastic SIEM

Terraform

CloudFormation

Azure Bicep

AWS Lambda

Job description

Qode seeks a Cloud Security & SIEM Engineer to join its Security Operations Centre in Dubai. The role focuses on securing multi-cloud environments (AWS/Azure/GCP), integrating cloud telemetry with SIEM, monitoring activities, and automating security operations.

The candidate will implement IAM controls, strengthen network security, and develop SIEM detection rules and dashboards. Immediate joiners preferred for a dynamic onsite SOC.